FBI Blames North Korea’s TraderTraitor for $6.3B Binance Theft
November 2, 2026
The FBI, Secret Service and IRS-CI attribute the roughly $6.3 billion Binance theft to North Korea’s TraderTraitor and publish 628
Cybersecurity
FBI Blames North Korea’s TraderTraitor for $6.3B Binance Theft
The FBI, Secret Service and IRS-CI attribute the roughly $6.3 billion Binance theft to North Korea's TraderTraitor and publish 628 addresses used to launder it.
Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android's phone process and loop devices; Android 12 and 13 lack a ...
Canonical Patches CVSS 10.0 LXD Flaw Letting Attackers Spoof Clients
Canonical fixed CVE-2026-112816, a CVSS 10.0 LXD and MicroCloud flaw that lets attackers authenticate as a trusted client using only its public certificate.
Rapid7 Releases Metasploit Module for BeyondTrust CVE-2026-102764
Rapid7 published a technical analysis and a working Metasploit module for CVE-2026-102764, a BeyondTrust Remote Support flaw already exploited in attacks.
Talos: VOLTA Infostealer Uses Claude and Gemini to Rank Victims
Cisco Talos details VOLTA-AUTODOXER, an infostealer that sends stolen victim data to Claude, Kimi or Gemini via OpenRouter to rank what each victim is worth.
Dell Fixes 44 PowerStore Flaws in DSA-2026-479, Seven Rated 9.8
Dell's DSA-2026-479 patches 44 PowerStore vulnerabilities, including seven rated CVSS 9.8 in the SDNAS file services layer. Upgrade to OS 5.1.0.0-2798105.
MediaTek November Bulletin Fixes 57 Flaws, Six Critical Modem Bugs
MediaTek's November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio contact.
Apache Wicket Discloses 19 Vulnerabilities Across Three Release Lines
Apache Wicket disclosed 19 vulnerabilities across versions 8.x, 9.x and 10.x, including XSS, missing authorization and upload DoS bugs. Upgrade to 10.12.0.
Public Exploit Targets Linux Bonding Driver Flaw CVE-2026-31419
A public exploit for CVE-2026-31419, a Linux kernel bonding driver race condition, demonstrates root and container escape on Google's Container-Optimized OS.
Binance Loses About $6.3 Billion in Record Crypto Heist
Binance says a compromised DevOps laptop let attackers drain about $6.3 billion in assets, with nearly $3 billion frozen. TRM Labs points to TraderTraitor.
Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
November 2, 2026
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android’s phone process and loop devices; Android
Canonical Patches CVSS 10.0 LXD Flaw Letting Attackers Spoof Clients
November 2, 2026
Canonical fixed CVE-2026-112816, a CVSS 10.0 LXD and MicroCloud flaw that lets attackers authenticate as a trusted client using only
Rapid7 Releases Metasploit Module for BeyondTrust CVE-2026-102764
November 2, 2026
Rapid7 published a technical analysis and a working Metasploit module for CVE-2026-102764, a BeyondTrust Remote Support flaw already exploited in
Talos: VOLTA Infostealer Uses Claude and Gemini to Rank Victims
November 2, 2026
Cisco Talos details VOLTA-AUTODOXER, an infostealer that sends stolen victim data to Claude, Kimi or Gemini via OpenRouter to rank
Dell Fixes 44 PowerStore Flaws in DSA-2026-479, Seven Rated 9.8
November 2, 2026
Dell’s DSA-2026-479 patches 44 PowerStore vulnerabilities, including seven rated CVSS 9.8 in the SDNAS file services layer. Upgrade to OS
MediaTek November Bulletin Fixes 57 Flaws, Six Critical Modem Bugs
November 2, 2026
MediaTek’s November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio
Apache Wicket Discloses 19 Vulnerabilities Across Three Release Lines
November 2, 2026
Apache Wicket disclosed 19 vulnerabilities across versions 8.x, 9.x and 10.x, including XSS, missing authorization and upload DoS bugs. Upgrade
Public Exploit Targets Linux Bonding Driver Flaw CVE-2026-31419
November 2, 2026
A public exploit for CVE-2026-31419, a Linux kernel bonding driver race condition, demonstrates root and container escape on Google’s Container-Optimized
Binance Loses About $6.3 Billion in Record Crypto Heist
October 30, 2026
Binance says a compromised DevOps laptop let attackers drain about $6.3 billion in assets, with nearly $3 billion frozen. TRM
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.